Mutasiku API Documentation

Getting Started

Learn how to integrate Mutasiku API into your application.

Authentication

Learn how to authenticate your API requests

All API requests require authentication using an API key. You can obtain your API key from your dashboard.

Include your API key in all requests using the x-api-key header.

curl -H 'x-api-key: YOUR_API_KEY' https://mutasiku.co.id/api/mutations

API Reference

Explore our API endpoints and their capabilities.

Provider API

Retrieve available bank and e-wallet providers.

List Providers

GET

/api/v1/provider

Retrieve a list of available banks and e-wallets to be used for account creation.

Parameters

type

Optional

string

Filter by provider type: 'bank' or 'ewallet'. If not provided, returns both types.

isActive

Optional

boolean

Filter by provider status: true for active providers, false for inactive providers

search

Optional

string

Search by provider name or code

Name	Type	Required	Description
type	`string`	Optional	Filter by provider type: 'bank' or 'ewallet'. If not provided, returns both types.
isActive	`boolean`	Optional	Filter by provider status: true for active providers, false for inactive providers
search	`string`	Optional	Search by provider name or code

Example Request

curl -X GET \
  'https://mutasiku.co.id/api/v1/provider' \
  -H 'x-api-key: YOUR_API_KEY'

Usage Examples

Get All Providers

curl -X GET \
  'https://mutasiku.co.id/api/v1/provider' \
  -H 'x-api-key: YOUR_API_KEY'

Get Only Banks

curl -X GET \
  'https://mutasiku.co.id/api/v1/provider?type=bank' \
  -H 'x-api-key: YOUR_API_KEY'

Get Only Active E-Wallets

curl -X GET \
  'https://mutasiku.co.id/api/v1/provider?type=ewallet&isActive=true' \
  -H 'x-api-key: YOUR_API_KEY'

Search for Providers

curl -X GET \
  'https://mutasiku.co.id/api/v1/provider?search=bank' \
  -H 'x-api-key: YOUR_API_KEY'

Responses

200

Successful response

{
  "status": "success",
  "data": {
    "banks": [
    {
      "id": "bank-id-123",
      "name": "Bank Central Asia",
      "code": "BCA",
      "isActive": true,
      "pointCost": 500
    },
    {
      "id": "bank-id-456",
      "name": "Bank Mandiri",
      "code": "MANDIRI",
      "isActive": true,
      "pointCost": 500
    }
    ],
    "ewallets": [
    {
      "id": "ewallet-id-123",
      "name": "DANA",
      "code": "DANA",
      "isActive": true,
      "pointCost": 1000
    },
    {
      "id": "ewallet-id-456",
      "name": "OVO",
      "code": "OVO",
      "isActive": true,
      "pointCost": 1000
    },
    {
      "id": "ewallet-id-789",
      "name": "GOPAY Merchant",
      "code": "GOPAY-MERCHANT",
      "isActive": true,
      "pointCost": 1500
    }
    ]
  }
}

401

Unauthorized - Invalid or missing API key

{
  "status": "error",
  "error": "Missing API key"
}

500

Internal Server Error

{
  "status": "error",
  "error": "Internal server error"
}

Accounts API

Retrieve bank and e-wallet accounts.

List Accounts

GET

/api/v1/accounts

Retrieve bank and e-wallet accounts with filtering, searching, and pagination options.

Parameters

type

Optional

string

Filter by account type: 'bank' or 'ewallet'. If not provided, returns both types.

isActive

Optional

boolean

Filter by account status: true for active accounts, false for inactive accounts

providerCode

Optional

string

Filter by provider code (bank or e-wallet code)

search

Optional

string

Search in account number, account name, provider name, or phone number

page

Optional

number

Page number for pagination (default: 1)

limit

Optional

number

Number of items per page (default: 10, max: 100)

Name	Type	Required	Description
type	`string`	Optional	Filter by account type: 'bank' or 'ewallet'. If not provided, returns both types.
isActive	`boolean`	Optional	Filter by account status: true for active accounts, false for inactive accounts
providerCode	`string`	Optional	Filter by provider code (bank or e-wallet code)
search	`string`	Optional	Search in account number, account name, provider name, or phone number
page	`number`	Optional	Page number for pagination (default: 1)
limit	`number`	Optional	Number of items per page (default: 10, max: 100)

Example Request

curl -X GET \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY'

Usage Examples

Get All Accounts

curl -X GET \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY'

Filter by Account Type

curl -X GET \
  'https://mutasiku.co.id/api/v1/accounts?type=ewallet' \
  -H 'x-api-key: YOUR_API_KEY'

Filter Active Accounts with Provider

curl -X GET \
  'https://mutasiku.co.id/api/v1/accounts?isActive=true&providerCode=DANA' \
  -H 'x-api-key: YOUR_API_KEY'

Search with Pagination

curl -X GET \
  'https://mutasiku.co.id/api/v1/accounts?search=john&page=2&limit=20' \
  -H 'x-api-key: YOUR_API_KEY'

Responses

200

Successful response

{
  "status": "success",
  "data": [
    {
    "id": "123e4567-e89b-12d3-a456-426614174000",
    "type": "ewallet",
    "name": "John Doe",
    "phoneNumber": "+62-85157367702",
    "balance": 100000,
    "lastSync": "2024-02-12T08:30:00.000Z",
    "intervalMinutes": 15,
    "isActive": true,
    "provider": {
      "id": "ewallet-id-123",
      "name": "DANA",
      "code": "DANA",
      "isActive": true,
      "pointCost": 1000
    }
    },
    {
    "id": "123e4567-e89b-12d3-a456-426614174001",
    "type": "bank",
    "name": "John Doe",
    "accountNumber": "1234567890",
    "balance": 5000000,
    "lastSync": "2024-02-12T08:30:00.000Z",
    "intervalMinutes": 30,
    "isActive": true,
    "provider": {
      "id": "bank-id-123",
      "name": "Bank Central Asia",
      "code": "BCA",
      "isActive": true,
      "pointCost": 500
    }
    }
  ],
  "pagination": {
    "total": 50,
    "page": 1,
    "limit": 10,
    "totalPages": 5,
    "hasMore": true
  }
}

400

Bad Request - Invalid parameters

{
  "status": "error",
  "error": "Validation error",
  "details": [
    {
    "code": "invalid_type",
    "path": [
      "isActive"
    ],
    "message": "Expected boolean, received string"
    }
  ]
}

401

Unauthorized - Invalid or missing API key

{
  "status": "error",
  "error": "Missing API key"
}

404

Not Found - Record not found

{
  "status": "error",
  "error": "Record not found"
}

500

Internal Server Error

{
  "status": "error",
  "error": "Internal server error"
}

Create Account

POST

/api/v1/accounts

Create a new bank or e-wallet account. Note that special providers like OVO and GOPAY-MERCHANT require a different authentication flow.

Request Body

Required

Account creation data

application/json

{
  "type": "bank",
  "providerCode": "BCA",
  "accountNumber": "1234567890",
  "accountName": "John Doe",
  "username": "johndoe",
  "password": "secretpass",
  "intervalMinutes": 5
}

Example Request

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY'\
  -H 'Content-Type: application/json' \
  -d '{
    "type": "bank",
    "providerCode": "BCA",
    "accountNumber": "1234567890",
    "accountName": "John Doe",
    "username": "johndoe",
    "password": "secretpass",
    "intervalMinutes": 5
  }'

Usage Examples

Create Bank Account

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "type": "bank",
    "providerCode": "BCA",
    "accountNumber": "1234567890",
    "accountName": "John Doe",
    "username": "johndoe",
    "password": "secretpass",
    "intervalMinutes": 5
  }'

Create E-Wallet Account

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "type": "ewallet",
    "providerCode": "DANA",
    "phoneNumber": "081234567890",
    "accountName": "John Doe",
    "pin": "secretpin",
    "intervalMinutes": 5
  }'

Responses

200

Successful response for regular account creation

{
  "status": "success",
  "data": {
    "accountId": "123e4567-e89b-12d3-a456-426614174000"
  }
}

200

Special flow response for OVO accounts

{
  "status": "special_flow",
  "message": "This provider requires a special verification flow",
  "provider": "OVO",
  "providerCode": "OVO",
  "nextAction": {
    "action": "ovo-send-otp",
    "requiredData": {
    "phoneNumber": "081234567890",
    "providerCode": "OVO",
    "accountName": "My OVO Account",
    "intervalMinutes": 5
    }
  }
}

200

Special flow response for GOPAY-MERCHANT accounts

{
  "status": "special_flow",
  "message": "This provider requires a special verification flow",
  "provider": "GOPAY-MERCHANT",
  "providerCode": "GOPAY-MERCHANT",
  "nextAction": {
    "action": "gopay-merchant-send-otp",
    "requiredData": {
    "phoneNumber": "081234567890",
    "providerCode": "GOPAY-MERCHANT",
    "accountName": "My GOPAY Merchant Account",
    "intervalMinutes": 5
    }
  }
}

400

Bad Request - Invalid parameters

{
  "status": "error",
  "error": "Validation error",
  "details": [
    {
    "code": "invalid_enum_value",
    "path": [
      "type"
    ],
    "message": "Expected 'bank' or 'ewallet', received 'wallet'"
    }
  ]
}

400

Bad Request - Insufficient points

{
  "status": "error",
  "error": "Insufficient points. You need 1000 points, but you have 500 points."
}

401

Unauthorized - Invalid or missing API key

{
  "status": "error",
  "error": "Missing API key"
}

404

Not Found - Provider not found

{
  "status": "error",
  "error": "Provider not found"
}

500

Internal Server Error

{
  "status": "error",
  "error": "Internal server error"
}

Get Account Details

GET

/api/v1/accounts/{id}

Retrieve detailed information about a specific account.

Parameters

id

Required

string

The account ID

Name	Type	Required	Description
id	`string`	Required	The account ID

Example Request

curl -X GET \
  'https://mutasiku.co.id/api/v1/accounts/{id}' \
  -H 'x-api-key: YOUR_API_KEY'

Usage Examples

Get Account Details

curl -X GET \
  'https://mutasiku.co.id/api/v1/accounts/123e4567-e89b-12d3-a456-426614174000' \
  -H 'x-api-key: YOUR_API_KEY'

Responses

200

Successful response

{
  "status": "success",
  "data": {
    "id": "123e4567-e89b-12d3-a456-426614174000",
    "type": "ewallet",
    "name": "John Doe",
    "phoneNumber": "+62-85157367702",
    "balance": 100000,
    "lastSync": "2024-02-12T08:30:00.000Z",
    "intervalMinutes": 15,
    "isActive": true,
    "username": "johndoe",
    "provider": {
    "id": "ewallet-id-123",
    "name": "DANA",
    "code": "DANA",
    "isActive": true,
    "pointCost": 1000
    }
  }
}

401

Unauthorized - Invalid or missing API key

{
  "status": "error",
  "error": "Missing API key"
}

404

Not Found - Account not found

{
  "status": "error",
  "error": "Account not found"
}

500

Internal Server Error

{
  "status": "error",
  "error": "Internal server error"
}

Update Account

PATCH

/api/v1/accounts/{id}

Update account information. Note that changing phone number for OVO or GOPAY-MERCHANT accounts requires re-authentication.

Parameters

id

Required

string

The account ID

Name	Type	Required	Description
id	`string`	Required	The account ID

Request Body

Required

Fields to update

application/json

{
  "accountName": "John Smith",
  "intervalMinutes": 10,
  "username": "johnsmith",
  "password": "newsecretpass"
}

Example Request

curl -X PATCH \
  'https://mutasiku.co.id/api/v1/accounts/{id}' \
  -H 'x-api-key: YOUR_API_KEY'\
  -H 'Content-Type: application/json' \
  -d '{
    "accountName": "John Smith",
    "intervalMinutes": 10,
    "username": "johnsmith",
    "password": "newsecretpass"
  }'

Usage Examples

Update Account Name and Interval

curl -X PATCH \
  'https://mutasiku.co.id/api/v1/accounts/123e4567-e89b-12d3-a456-426614174000' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "accountName": "John Smith",
    "intervalMinutes": 10
  }'

Update Login Credentials

curl -X PATCH \
  'https://mutasiku.co.id/api/v1/accounts/123e4567-e89b-12d3-a456-426614174000' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "username": "johnsmith",
    "password": "newsecretpass"
  }'

Responses

200

Successful response for regular update

{
  "status": "success",
  "message": "Account updated successfully"
}

200

Special flow response for phone number change requiring re-authentication

{
  "status": "special_flow",
  "message": "Changing phone number requires re-authentication",
  "provider": "OVO",
  "providerCode": "OVO",
  "accountId": "123e4567-e89b-12d3-a456-426614174000",
  "nextAction": {
    "action": "ovo-send-otp",
    "requiredData": {
    "accountId": "123e4567-e89b-12d3-a456-426614174000",
    "phoneNumber": "081234567890",
    "providerCode": "OVO"
    }
  }
}

400

Bad Request - Invalid parameters

{
  "status": "error",
  "error": "Validation error",
  "details": [
    {
    "code": "invalid_type",
    "path": [
      "intervalMinutes"
    ],
    "message": "Expected number, received string"
    }
  ]
}

401

Unauthorized - Invalid or missing API key

{
  "status": "error",
  "error": "Missing API key"
}

404

Not Found - Account not found

{
  "status": "error",
  "error": "Account not found"
}

500

Internal Server Error

{
  "status": "error",
  "error": "Internal server error"
}

Delete Account

DELETE

/api/v1/accounts/{id}

Delete an account. This operation cannot be undone.

Parameters

id

Required

string

The account ID

Name	Type	Required	Description
id	`string`	Required	The account ID

Example Request

curl -X DELETE \
  'https://mutasiku.co.id/api/v1/accounts/{id}' \
  -H 'x-api-key: YOUR_API_KEY'

Usage Examples

Delete Account

curl -X DELETE \
  'https://mutasiku.co.id/api/v1/accounts/123e4567-e89b-12d3-a456-426614174000' \
  -H 'x-api-key: YOUR_API_KEY'

Responses

200

Successful response

{
  "status": "success",
  "message": "Account deleted successfully"
}

401

Unauthorized - Invalid or missing API key

{
  "status": "error",
  "error": "Missing API key"
}

404

Not Found - Account not found

{
  "status": "error",
  "error": "Account not found"
}

500

Internal Server Error

{
  "status": "error",
  "error": "Internal server error"
}

Refresh Account

GET

/api/v1/accounts/{id}/refresh

Trigger a manual refresh of the account balance and transactions.

Parameters

id

Required

string

The account ID

Name	Type	Required	Description
id	`string`	Required	The account ID

Example Request

curl -X GET \
  'https://mutasiku.co.id/api/v1/accounts/{id}/refresh' \
  -H 'x-api-key: YOUR_API_KEY'

Usage Examples

Refresh Account

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts/123e4567-e89b-12d3-a456-426614174000/refresh' \
  -H 'x-api-key: YOUR_API_KEY'

Responses

200

Successful response

{
  "status": "success",
  "message": "Account refreshed successfully"
}

400

Bad Request - Account or provider is inactive

{
  "status": "error",
  "error": "Account is inactive"
}

401

Unauthorized - Invalid or missing API key

{
  "status": "error",
  "error": "Missing API key"
}

404

Not Found - Account not found

{
  "status": "error",
  "error": "Account not found"
}

500

Internal Server Error

{
  "status": "error",
  "error": "Internal server error"
}

DANA Accounts API

Authenticate and manage DANA accounts.

Send OTP

POST

/api/v1/accounts

Step 1: Send OTP for DANA account creation or relogin or update

Request Body

Required

DANA OTP request data

application/json

// For new account
{
  "action": "dana-send-otp",
  "phoneNumber": "081234567890",
  "pin": "123456",
  "providerCode": "DANA",
  "accountName": "My DANA Account",
  "intervalMinutes": 5,
  "verificationMethod": "WhatsApp or SMS"
}

// For relogin or update
{
  "action": "dana-send-otp",
  "phoneNumber": "081234567890",
  "pin": "123456",
  "accountId": "123e4567-e89b-12d3-a456-426614174000",
  "verificationMethod": "WhatsApp or SMS"
}

Example Request

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY'\
  -H 'Content-Type: application/json' \
  -d '// For new account
  {
    "action": "dana-send-otp",
    "phoneNumber": "081234567890",
    "pin": "123456",
    "providerCode": "DANA",
    "accountName": "My DANA Account",
    "intervalMinutes": 5,
    "verificationMethod": "WhatsApp or SMS"
  }
  
  // For relogin or update
  {
    "action": "dana-send-otp",
    "phoneNumber": "081234567890",
    "pin": "123456",
    "accountId": "123e4567-e89b-12d3-a456-426614174000",
    "verificationMethod": "WhatsApp or SMS"
  }'

Usage Examples

Send OTP for New DANA Account

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "action": "dana-send-otp",
    "phoneNumber": "081234567890",
    "pin": "123456",
    "providerCode": "DANA",
    "accountName": "My DANA Account",
    "intervalMinutes": 5,
    "verificationMethod": "WhatsApp or SMS"
  }'

Send OTP for DANA Account Relogin or update

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "action": "dana-send-otp",
    "phoneNumber": "081234567890",
    "pin": "123456",
    "accountId": "123e4567-e89b-12d3-a456-426614174000",
    "verificationMethod": "WhatsApp or SMS"
  }'

Responses

200

Successful response

{
  "success": true,
  "sessionId": "123e4567-e89b-12d3-a456-426614174000",
  "message": "OTP has been sent to your phone"
}

400

Bad Request - Missing required fields

{
  "success": false,
  "message": "Missing required fields: For new accounts, phoneNumber, pin, providerCode, accountName, and intervalMinutes are required"
}

400

Bad Request - Provider not found or unavailable

{
  "success": false,
  "message": "Provider not found"
}

500

Internal Server Error

{
  "success": false,
  "message": "DANA API error: Internal Server Error"
}

Verify OTP

POST

/api/v1/accounts

Step 2: Verify OTP for DANA account creation or relogin or update

Request Body

Required

DANA OTP verification data

application/json

// For new account
{
  "action": "dana-verify-otp",
  "sessionId": "123e4567-e89b-12d3-a456-426614174000",
  "otp": "1234"
}

// For relogin or update
{
  "action": "dana-verify-otp",
  "sessionId": "123e4567-e89b-12d3-a456-426614174000",
  "accountId": "123e4567-e89b-12d3-a456-426614174001",
  "otp": "1234"
}

Example Request

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY'\
  -H 'Content-Type: application/json' \
  -d '// For new account
  {
    "action": "dana-verify-otp",
    "sessionId": "123e4567-e89b-12d3-a456-426614174000",
    "otp": "1234"
  }
  
  // For relogin or update
  {
    "action": "dana-verify-otp",
    "sessionId": "123e4567-e89b-12d3-a456-426614174000",
    "accountId": "123e4567-e89b-12d3-a456-426614174001",
    "otp": "1234"
  }'

Usage Examples

Verify OTP for New DANA Account

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "action": "dana-verify-otp",
    "sessionId": "123e4567-e89b-12d3-a456-426614174000",
    "otp": "1234"
  }'

Verify OTP for DANA Account Relogin or update

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "action": "dana-verify-otp",
    "sessionId": "123e4567-e89b-12d3-a456-426614174000",
    "accountId": "123e4567-e89b-12d3-a456-426614174001",
    "otp": "1234"
  }'

Responses

200

Successful response

{
  "success": true,
  "accountId": "123e4567-e89b-12d3-a456-426614174000"
}

400

Bad Request - Missing required verification data

{
  "success": false,
  "message": "Missing required verification data"
}

400

Bad Request - Session expired or not found

{
  "success": false,
  "message": "Session expired or not found. Please try the verification process again."
}

400

Bad Request - Verification failed

{
  "success": false,
  "message": "Verification failed"
}

500

Internal Server Error

{
  "success": false,
  "message": "DANA API error: Internal Server Error"
}

OVO Accounts API

Authenticate and manage OVO accounts.

Send OTP

POST

/api/v1/accounts

Step 1: Send OTP for OVO account creation or relogin or update

Request Body

Required

OVO OTP request data

application/json

// For new account
{
  "action": "ovo-send-otp",
  "phoneNumber": "081234567890",
  "providerCode": "OVO",
  "accountName": "My OVO Account",
  "intervalMinutes": 5,
  "verificationMethod": "WhatsApp or SMS"
}

// For relogin or update
{
  "action": "ovo-send-otp",
  "phoneNumber": "081234567890",
  "accountId": "123e4567-e89b-12d3-a456-426614174000",
  "verificationMethod": "WhatsApp or SMS"
}

Example Request

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY'\
  -H 'Content-Type: application/json' \
  -d '// For new account
  {
    "action": "ovo-send-otp",
    "phoneNumber": "081234567890",
    "providerCode": "OVO",
    "accountName": "My OVO Account",
    "intervalMinutes": 5,
    "verificationMethod": "WhatsApp or SMS"
  }
  
  // For relogin or update
  {
    "action": "ovo-send-otp",
    "phoneNumber": "081234567890",
    "accountId": "123e4567-e89b-12d3-a456-426614174000",
    "verificationMethod": "WhatsApp or SMS"
  }'

Usage Examples

Send OTP for New OVO Account

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "action": "ovo-send-otp",
    "phoneNumber": "081234567890",
    "providerCode": "OVO",
    "accountName": "My OVO Account",
    "intervalMinutes": 5,
    "verificationMethod": "WhatsApp or SMS"
  }'

Send OTP for OVO Account Relogin or update

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "action": "ovo-send-otp",
    "phoneNumber": "081234567890",
    "accountId": "123e4567-e89b-12d3-a456-426614174000",
    "verificationMethod": "WhatsApp or SMS"
  }'

Responses

200

Successful response

{
  "success": true,
  "sessionId": "123e4567-e89b-12d3-a456-426614174000",
  "message": "OTP has been sent to your phone"
}

400

Bad Request - Missing required fields

{
  "success": false,
  "message": "Missing required fields: For new accounts, phoneNumber, providerCode, accountName, and intervalMinutes are required"
}

400

Bad Request - Provider not found or unavailable

{
  "success": false,
  "message": "Provider not found"
}

500

Internal Server Error

{
  "success": false,
  "message": "OVO API error: Internal Server Error"
}

Verify OTP

POST

/api/v1/accounts

Step 2: Verify OTP for OVO account creation or relogin or update

Request Body

Required

OVO OTP verification data

application/json

// For new account
{
  "action": "ovo-verify-otp",
  "sessionId": "123e4567-e89b-12d3-a456-426614174000",
  "otp": "123456",
  "pin": "123456"
}

// For relogin or update
{
  "action": "ovo-verify-otp",
  "sessionId": "123e4567-e89b-12d3-a456-426614174000",
  "accountId": "123e4567-e89b-12d3-a456-426614174001",
  "otp": "123456",
  "pin": "123456"
}

Example Request

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY'\
  -H 'Content-Type: application/json' \
  -d '// For new account
  {
    "action": "ovo-verify-otp",
    "sessionId": "123e4567-e89b-12d3-a456-426614174000",
    "otp": "123456",
    "pin": "123456"
  }
  
  // For relogin or update
  {
    "action": "ovo-verify-otp",
    "sessionId": "123e4567-e89b-12d3-a456-426614174000",
    "accountId": "123e4567-e89b-12d3-a456-426614174001",
    "otp": "123456",
    "pin": "123456"
  }'

Usage Examples

Verify OTP for New OVO Account

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "action": "ovo-verify-otp",
    "sessionId": "123e4567-e89b-12d3-a456-426614174000",
    "otp": "123456",
    "pin": "123456"
  }'

Verify OTP for OVO Account Relogin or update

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "action": "ovo-verify-otp",
    "sessionId": "123e4567-e89b-12d3-a456-426614174000",
    "accountId": "123e4567-e89b-12d3-a456-426614174001",
    "otp": "123456",
    "pin": "123456"
  }'

Responses

200

Successful response

{
  "success": true,
  "accountId": "123e4567-e89b-12d3-a456-426614174000"
}

400

Bad Request - Missing required verification data

{
  "success": false,
  "message": "Missing required verification data"
}

400

Bad Request - Session expired or not found

{
  "success": false,
  "message": "Session expired or not found. Please try the verification process again."
}

400

Bad Request - Verification failed

{
  "success": false,
  "message": "Verification failed"
}

500

Internal Server Error

{
  "success": false,
  "message": "OVO API error: Internal Server Error"
}

GoPay Merchant API

Authenticate and manage GoPay Merchant accounts.

Send OTP

POST

/api/v1/accounts

Step 1: Send OTP for GOPAY-MERCHANT account creation or relogin or update

Request Body

Required

GOPAY-MERCHANT OTP request data

application/json

// For new account
{
  "action": "gopay-merchant-send-otp",
  "phoneNumber": "081234567890",
  "providerCode": "GOPAY-MERCHANT",
  "accountName": "My GOPAY Merchant Account",
  "intervalMinutes": 5,
  "verificationMethod": "WhatsApp or SMS"
}

// For relogin or update
{
  "action": "gopay-merchant-send-otp",
  "phoneNumber": "081234567890",
  "accountId": "123e4567-e89b-12d3-a456-426614174000",
  "verificationMethod": "WhatsApp or SMS"
}

Example Request

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY'\
  -H 'Content-Type: application/json' \
  -d '// For new account
  {
    "action": "gopay-merchant-send-otp",
    "phoneNumber": "081234567890",
    "providerCode": "GOPAY-MERCHANT",
    "accountName": "My GOPAY Merchant Account",
    "intervalMinutes": 5,
    "verificationMethod": "WhatsApp or SMS"
  }
  
  // For relogin or update
  {
    "action": "gopay-merchant-send-otp",
    "phoneNumber": "081234567890",
    "accountId": "123e4567-e89b-12d3-a456-426614174000",
    "verificationMethod": "WhatsApp or SMS"
  }'

Usage Examples

Send OTP for New GOPAY-MERCHANT Account

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "action": "gopay-merchant-send-otp",
    "phoneNumber": "081234567890",
    "providerCode": "GOPAY-MERCHANT",
    "accountName": "My GOPAY Merchant Account",
    "intervalMinutes": 5,
    "verificationMethod": "WhatsApp or SMS"
  }'

Send OTP for GOPAY-MERCHANT Account Relogin or update

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "action": "gopay-merchant-send-otp",
    "phoneNumber": "081234567890",
    "accountId": "123e4567-e89b-12d3-a456-426614174000",
    "verificationMethod": "WhatsApp or SMS"
  }'

Responses

200

Successful response

{
  "success": true,
  "sessionId": "123e4567-e89b-12d3-a456-426614174000",
  "message": "OTP has been sent to your phone"
}

400

Bad Request - Missing required fields

{
  "success": false,
  "message": "Missing required fields: phoneNumber, providerCode, accountName, and intervalMinutes are required"
}

400

Bad Request - Provider not found or unavailable

{
  "success": false,
  "message": "Provider is currently unavailable"
}

400

Bad Request - Login failed

{
  "success": false,
  "message": "Login failed"
}

500

Internal Server Error

{
  "success": false,
  "message": "An error occurred processing the request"
}

Verify OTP

POST

/api/v1/accounts

Step 2: Verify OTP for GOPAY-MERCHANT account creation or relogin or update

Request Body

Required

GOPAY-MERCHANT OTP verification data

application/json

// For new account
{
  "action": "gopay-merchant-verify-otp",
  "sessionId": "123e4567-e89b-12d3-a456-426614174000",
  "otp": "123456"
}

// For relogin or update
{
  "action": "gopay-merchant-verify-otp",
  "sessionId": "123e4567-e89b-12d3-a456-426614174000",
  "accountId": "123e4567-e89b-12d3-a456-426614174001",
  "otp": "123456"
}

Example Request

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY'\
  -H 'Content-Type: application/json' \
  -d '// For new account
  {
    "action": "gopay-merchant-verify-otp",
    "sessionId": "123e4567-e89b-12d3-a456-426614174000",
    "otp": "123456"
  }
  
  // For relogin or update
  {
    "action": "gopay-merchant-verify-otp",
    "sessionId": "123e4567-e89b-12d3-a456-426614174000",
    "accountId": "123e4567-e89b-12d3-a456-426614174001",
    "otp": "123456"
  }'

Usage Examples

Verify OTP for New GOPAY-MERCHANT Account

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "action": "gopay-merchant-verify-otp",
    "sessionId": "123e4567-e89b-12d3-a456-426614174000",
    "otp": "123456"
  }'

Verify OTP for GOPAY-MERCHANT Account Relogin or update

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "action": "gopay-merchant-verify-otp",
    "sessionId": "123e4567-e89b-12d3-a456-426614174000",
    "accountId": "123e4567-e89b-12d3-a456-426614174001",
    "otp": "123456"
  }'

Responses

200

Successful response

{
  "success": true,
  "accountId": "123e4567-e89b-12d3-a456-426614174000"
}

200

Response requiring second OTP

{
  "success": false,
  "requireSecondOTP": true,
  "sessionId": "123e4567-e89b-12d3-a456-426614174001",
  "message": "Second verification code is required"
}

400

Bad Request - Missing required verification data

{
  "success": false,
  "message": "Missing required verification data"
}

400

Bad Request - Session expired or not found

{
  "success": false,
  "message": "Session expired or not found. Please try the verification process again."
}

400

Bad Request - OTP verification failed

{
  "success": false,
  "message": "OTP verification failed"
}

500

Internal Server Error

{
  "success": false,
  "message": "An error occurred processing the request"
}

Mutations API

Retrieve and monitor bank and e-wallet transaction data.

List Mutations

GET

/api/v1/mutations

Retrieve bank and e-wallet transaction data with comprehensive filtering, searching, and pagination options.

Parameters

accountId

Optional

string

Filter by specific account ID (bank or wallet account)

accountType

Optional

string

Filter by account type: 'bank' or 'wallet'

type

Optional

string

Filter by transaction type: 'CREDIT', 'DEBIT'. Case sensitive.

search

Optional

string

Search in transaction description, bank account number, or wallet phone number

startDate

Optional

string (YYYY-MM-DD)

Filter transactions from this date (inclusive)

endDate

Optional

string (YYYY-MM-DD)

Filter transactions until this date (inclusive)

minAmount

Optional

number

Minimum transaction amount

maxAmount

Optional

number

Maximum transaction amount

page

Optional

number

Page number for pagination (default: 1)

limit

Optional

number

Number of items per page (default: 10, max: 100)

Name	Type	Required	Description
accountId	`string`	Optional	Filter by specific account ID (bank or wallet account)
accountType	`string`	Optional	Filter by account type: 'bank' or 'wallet'
type	`string`	Optional	Filter by transaction type: 'CREDIT', 'DEBIT'. Case sensitive.
search	`string`	Optional	Search in transaction description, bank account number, or wallet phone number
startDate	`string (YYYY-MM-DD)`	Optional	Filter transactions from this date (inclusive)
endDate	`string (YYYY-MM-DD)`	Optional	Filter transactions until this date (inclusive)
minAmount	`number`	Optional	Minimum transaction amount
maxAmount	`number`	Optional	Maximum transaction amount
page	`number`	Optional	Page number for pagination (default: 1)
limit	`number`	Optional	Number of items per page (default: 10, max: 100)

Example Request

curl -X GET \
  'https://mutasiku.co.id/api/v1/mutations' \
  -H 'x-api-key: YOUR_API_KEY'

Usage Examples

Filter by Date Range

curl -X GET \
  'https://mutasiku.co.id/api/v1/mutations?startDate=2024-01-28&endDate=2025-03-06' \
  -H 'x-api-key: YOUR_API_KEY'

Filter by Account Type and Transaction Type

curl -X GET \
  'https://mutasiku.co.id/api/v1/mutations?accountType=wallet&type=CREDIT' \
  -H 'x-api-key: YOUR_API_KEY'

Search with Amount Range

curl -X GET \
  'https://mutasiku.co.id/api/v1/mutations?search=transfer&minAmount=10000&maxAmount=1000000' \
  -H 'x-api-key: YOUR_API_KEY'

Complex Filter Combination

curl -X GET \
  'https://mutasiku.co.id/api/v1/mutations?accountType=bank&type=DEBIT&startDate=2024-01-28 \
  &endDate=2025-03-06&minAmount=10000&search=withdrawal&page=2&limit=20' \
  -H 'x-api-key: YOUR_API_KEY'

Responses

200

Successful response

{
  "status": "success",
  "data": [
    {
    "id": "af0ab8bd-3051-411e-81d1-7e9a384e1d30",
    "amount": 39921,
    "type": "DEBIT",
    "description": "Kirim Uang",
    "senderName": "Ahmad Rahmat",
    "recipientName": "Siti Nurhaliza",
    "status": "SUCCESS",
    "createdAt": "2024-11-18T11:41:28.000Z",
    "account": {
      "type": "wallet",
      "id": "949382b6-f5e8-461f-88fc-d4f37fc62c22",
      "phoneNumber": "+62-85157367702",
      "accountName": "Test",
      "provider": {
        "name": "DANA",
        "code": "DANA"
      }
    },
    "payment": {
      "orderId": "ORD123",
      "customerName": "John Doe",
      "customerEmail": "john@example.com",
      "customerPhone": "+62-8123456789",
      "metadata": {
        "additional": "info"
      }
    }
    }
  ],
  "pagination": {
    "total": 50,
    "page": 1,
    "limit": 10,
    "totalPages": 5,
    "hasMore": true
  }
}

400

Bad Request - Invalid parameters

{
  "status": "error",
  "error": "Validation error",
  "details": [
    {
    "code": "invalid_date",
    "path": [
      "startDate"
    ],
    "message": "Invalid date format"
    }
  ]
}

401

Unauthorized - Invalid or missing API key

{
  "status": "error",
  "error": "Missing API key"
}

404

Not Found - Record not found

{
  "status": "error",
  "error": "Record not found"
}

500

Internal Server Error

{
  "status": "error",
  "error": "Internal server error"
}

Payments API

Create and check payment transactions.

Create Payment

POST

/api/v1/payments

Create a new payment request for QRIS transactions, Virtual Accounts, or Direct payments.

Important Information

Payment Types by Provider

Different wallet providers support different payment types: **GOPAY-MERCHANT** - QRIS: Standard QRIS payment - QRIS-DYNAMIC: Dynamic QRIS with variable amount **GRAB-MERCHANT** - QRIS: Standard QRIS payment only **DANA** - DIRECT: Direct payment from DANA wallet - VA-BCA: BCA Virtual Account - VA-MANDIRI: Mandiri Virtual Account - VA-PERMATA: Permata Virtual Account **DANA BISNIS** - QRIS: Standard QRIS payment - QRIS-DYNAMIC: Dynamic QRIS with variable amount ⚠️ **Important**: Virtual Account (VA-BCA, VA-MANDIRI, VA-PERMATA) and DIRECT payment types are only available for DANA accounts. Attempting to use these payment types with other providers will result in an error. Make sure to use a payment type that is supported by your wallet provider, otherwise the API will return a 400 error.

QRIS Image

For QRIS and QRIS-DYNAMIC payment types, the response includes a `qrisImage` field containing a URL to the QR code image. **Usage:** ```html <img src="https://mutasiku.co.id/api/qris/YOUR_TOKEN" alt="QRIS" /> ``` The URL returns a PNG image (256x256) that can be directly embedded in your payment page. The image URL uses the same secure token as the paymentUrl, so the payment ID is not exposed.

Parameters

amount

Required

number

Payment amount in IDR

walletAccountId

Required

string

UUID of the wallet account to receive the payment

redirectUrl

Required

string

URL to redirect user after payment completion

orderId

Required

string

Your unique order identifier

type

Required

string

Payment type. Available types: 'DIRECT', 'VA-BCA', 'VA-MANDIRI', 'VA-PERMATA', 'QRIS', 'QRIS-DYNAMIC'. Note: GOPAY-MERCHANT only supports 'QRIS' and 'QRIS-DYNAMIC'. GRAB-MERCHANT only supports 'QRIS'. DANA only supports 'DIRECT', 'VA-BCA', 'VA-MANDIRI', 'VA-PERMATA', 'QRIS', and 'QRIS-DYNAMIC'.

Name	Type	Required	Description
amount	`number`	Required	Payment amount in IDR
walletAccountId	`string`	Required	UUID of the wallet account to receive the payment
redirectUrl	`string`	Required	URL to redirect user after payment completion
orderId	`string`	Required	Your unique order identifier
type	`string`	Required	Payment type. Available types: 'DIRECT', 'VA-BCA', 'VA-MANDIRI', 'VA-PERMATA', 'QRIS', 'QRIS-DYNAMIC'. Note: GOPAY-MERCHANT only supports 'QRIS' and 'QRIS-DYNAMIC'. GRAB-MERCHANT only supports 'QRIS'. DANA only supports 'DIRECT', 'VA-BCA', 'VA-MANDIRI', 'VA-PERMATA', 'QRIS', and 'QRIS-DYNAMIC'.

Example Request

curl -X POST \
  'https://mutasiku.co.id/api/v1/payments' \
  -H 'x-api-key: YOUR_API_KEY'

Usage Examples

Create QRIS Payment (GoPay Merchant)

curl -X POST \
  'https://mutasiku.co.id/api/v1/payments' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
  "amount": 20000,
  "walletAccountId": "9a4f62d1-5d21-49ad-a5a9-1a77a6ba5b74",
  "redirectUrl": "https://merchant.com/order/success?id=123",
  "orderId": "order-123",
  "type": "QRIS"
}'

Create QRIS Dynamic Payment (GoPay Merchant)

curl -X POST \
  'https://mutasiku.co.id/api/v1/payments' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
  "amount": 50000,
  "walletAccountId": "9a4f62d1-5d21-49ad-a5a9-1a77a6ba5b74",
  "redirectUrl": "https://merchant.com/order/success?id=456",
  "orderId": "order-456",
  "type": "QRIS-DYNAMIC"
}'

Create QRIS Payment (Grab Merchant)

curl -X POST \
  'https://mutasiku.co.id/api/v1/payments' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
  "amount": 30000,
  "walletAccountId": "7b3c45a2-6e32-4acd-b8fa-2b88c7da6c85",
  "redirectUrl": "https://merchant.com/order/success?id=789",
  "orderId": "order-789",
  "type": "QRIS"
}'

Create Virtual Account Payment - BCA (DANA)

curl -X POST \
  'https://mutasiku.co.id/api/v1/payments' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
  "amount": 100000,
  "walletAccountId": "3d5e67f8-9a12-4bcd-c3de-4f99d8ea7f96",
  "redirectUrl": "https://merchant.com/order/success?id=101",
  "orderId": "order-101",
  "type": "VA-BCA"
}'

Create Virtual Account Payment - Mandiri (DANA)

curl -X POST \
  'https://mutasiku.co.id/api/v1/payments' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
  "amount": 150000,
  "walletAccountId": "3d5e67f8-9a12-4bcd-c3de-4f99d8ea7f96",
  "redirectUrl": "https://merchant.com/order/success?id=102",
  "orderId": "order-102",
  "type": "VA-MANDIRI"
}'

Create Direct Payment (DANA)

curl -X POST \
  'https://mutasiku.co.id/api/v1/payments' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
  "amount": 75000,
  "walletAccountId": "3d5e67f8-9a12-4bcd-c3de-4f99d8ea7f96",
  "redirectUrl": "https://merchant.com/order/success?id=202",
  "orderId": "order-202",
  "type": "DIRECT"
}'

Create QRIS Payment (DANA BISNIS)

curl -X POST \
  'https://mutasiku.co.id/api/v1/payments' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
  "amount": 45000,
  "walletAccountId": "3d5e67f8-9a12-4bcd-c3de-4f99d8ea7f96",
  "redirectUrl": "https://merchant.com/order/success?id=303",
  "orderId": "order-303",
  "type": "QRIS"
}'

Responses

200

Payment created successfully

{
  "status": "success",
  "data": {
    "id": "595a196b-191c-4767-818e-a7646dd048e8",
    "amount": 20000,
    "uniqueCode": 0,
    "totalAmount": 20000,
    "expiresAt": "2025-12-30T08:27:49.686Z",
    "paymentUrl": "https://mutasiku.co.id/pay/gaWSDgsdftYTc2NDZkZDAas324FSDvE3NjcwODI2NzA2OTg=",
    "type": "QRIS",
    "accountNumber": "081234567890",
    "accountName": "John Doe, Digital & Kreatif",
    "provider": {
      "name": "GOPAY MERCHANT",
      "code": "GOPAY-MERCHANT"
    },
    "qrisImage": "https://mutasiku.co.id/api/qris/gaWSDgsdftYTc2NDZkZDAas324FSDvE3NjcwODI2NzA2OTg="
  }
}

// Note: qrisImage is only included for QRIS and QRIS-DYNAMIC payment types.
// The URL returns a PNG image that can be used directly in <img> tags.

400

Bad Request - Invalid parameters or unsupported payment type for provider

{
  "status": "error",
  "error": "Invalid payment type for this provider"
}

401

Unauthorized - Invalid or missing API key

{
  "status": "error",
  "error": "Missing API key"
}

404

Wallet account not found

{
  "status": "error",
  "error": "Wallet account not found"
}

500

Internal Server Error

{
  "status": "error",
  "error": "Internal server error"
}

Check Payment Status

GET

/api/v1/payments/status/{paymentId}

Check the status of a payment transaction.

Parameters

paymentId

Required

string

UUID of the payment to check

Name	Type	Required	Description
paymentId	`string`	Required	UUID of the payment to check

Example Request

curl -X GET \
  'https://mutasiku.co.id/api/v1/payments/status/{paymentId}' \
  -H 'x-api-key: YOUR_API_KEY'

Usage Examples

Check Payment Status

curl -X GET \
  'https://mutasiku.co.id/api/v1/payments/status/595a196b-191c-4767-818e-a7646dd048e8' \
  -H 'x-api-key: YOUR_API_KEY'

Responses

200

Payment status retrieved successfully

{
  "status": "success",
  "data": {
    "id": "595a196b-191c-4767-818e-a7646dd048e8",
    "amount": 20000,
    "totalAmount": 20000,
    "status": "PAID",
    "type": "QRIS",
    "orderId": "order-123",
    "createdAt": "2025-12-30T07:27:49.686Z",
    "paidAt": "2025-12-30T07:30:15.123Z",
    "expiresAt": "2025-12-30T08:27:49.686Z"
  }
}

401

Unauthorized - Invalid or missing API key

{
  "status": "error",
  "error": "Missing API key"
}

404

Payment not found

{
  "status": "error",
  "error": "Payment not found"
}

500

Internal Server Error

{
  "status": "error",
  "error": "Internal server error"
}

DANA Operations API

Perform QRIS transfers and bank transfers using DANA accounts.

QRIS Transfer

POST

/api/v1/accounts/{id}/transfer

Create QRIS transfer using QR code image

Parameters

id

Required

string

DANA account ID

Name	Type	Required	Description
id	`string`	Required	DANA account ID

Request Body

Required

QRIS transfer data (multipart/form-data)

multipart/form-data

FormData:
- action: "dana-qris-create"
- qrImage: [File] (image file containing QR code)
- amount: "50000" (minimum Rp 1)

Example Request

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts/{id}/transfer' \
  -H 'x-api-key: YOUR_API_KEY' \
  -F 'action=dana-qris-create' \
  -F 'qrImage=@filename.jpg' \
  -F 'amount=50000'

Usage Examples

QRIS Transfer with QR Image

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts/123e4567-e89b-12d3-a456-426614174000' \
  -H 'x-api-key: YOUR_API_KEY' \
  -F 'action=dana-qris-create' \
  -F 'qrImage=@qr_code.jpg' \
  -F 'amount=50000'

Responses

200

QRIS transfer successful

{
  "success": true,
  "message": "QRIS transfer processed successfully"
}

400

Bad Request - Invalid input

{
  "success": false,
  "error": "QR image is required"
}

400

Bad Request - Insufficient balance

{
  "success": false,
  "error": "Insufficient balance",
  "balance": 45000
}

400

Bad Request - QR code decode failed

{
  "success": false,
  "error": "Failed to decode QR code from image"
}

404

Account not found

{
  "status": "error",
  "error": "Account not found"
}

500

Internal Server Error

{
  "success": false,
  "message": "An error occurred processing the request"
}

List Banks

POST

/api/v1/accounts/{id}/transfer

Get list of available banks for transfer

Parameters

id

Required

string

DANA account ID

Name	Type	Required	Description
id	`string`	Required	DANA account ID

Request Body

Required

Bank list request data

application/json

{
  "action": "dana-bank-list"
}

Example Request

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts/{id}/transfer' \
  -H 'x-api-key: YOUR_API_KEY'\
  -H 'Content-Type: application/json' \
  -d '{
    "action": "dana-bank-list"
  }'

Usage Examples

Get Available Banks

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts/123e4567-e89b-12d3-a456-426614174000' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "action": "dana-bank-list"
  }'

Responses

200

Bank list retrieved successfully

{
  "success": true,
  "data": [
    {
    "instId": "014",
    "name": "Bank Central Asia",
    "instLocalName": "Bank Central Asia",
    "payMethod": "WITHDRAW_BANKCARD",
    "payOption": "BANK_TRANSFER"
    },
    {
    "instId": "002",
    "name": "Bank Rakyat Indonesia",
    "instLocalName": "Bank Rakyat Indonesia",
    "payMethod": "WITHDRAW_BANKCARD",
    "payOption": "BANK_TRANSFER"
    }
  ]
}

400

Failed to fetch bank options

{
  "success": false,
  "message": "Failed to fetch bank options"
}

404

Account not found

{
  "status": "error",
  "error": "Account not found"
}

500

Internal Server Error

{
  "success": false,
  "message": "An error occurred processing the request"
}

Validate Bank Account

POST

/api/v1/accounts/{id}/transfer

Validate bank account and get account holder name

Parameters

id

Required

string

DANA account ID

Name	Type	Required	Description
id	`string`	Required	DANA account ID

Request Body

Required

Bank account validation data

application/json

{
  "action": "dana-bank-init",
  "accountNumber": "1234567890",
  "amount": "100000",
  "instId": "014",
  "instLocalName": "Bank Central Asia",
  "payMethod": "WITHDRAW_BANKCARD",
  "payOption": "BANK_TRANSFER"
}

Example Request

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts/{id}/transfer' \
  -H 'x-api-key: YOUR_API_KEY'\
  -H 'Content-Type: application/json' \
  -d '{
    "action": "dana-bank-init",
    "accountNumber": "1234567890",
    "amount": "100000",
    "instId": "014",
    "instLocalName": "Bank Central Asia",
    "payMethod": "WITHDRAW_BANKCARD",
    "payOption": "BANK_TRANSFER"
  }'

Usage Examples

Validate Bank Account

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts/123e4567-e89b-12d3-a456-426614174000' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "action": "dana-bank-init",
    "accountNumber": "1234567890",
    "amount": "100000",
    "instId": "014",
    "instLocalName": "Bank Central Asia",
    "payMethod": "WITHDRAW_BANKCARD",
    "payOption": "BANK_TRANSFER"
  }'

Responses

200

Account validation successful

{
  "success": true,
  "data": {
    "bankAccountIndexNo": "abc123def456",
    "accountName": "JOHN DOE"
  }
}

400

Bad Request - Missing required fields

{
  "success": false,
  "message": "Missing required fields: accountNumber, amount, instId, instLocalName, payMethod, and payOption are required"
}

400

Bad Request - Insufficient balance

{
  "success": false,
  "error": "Insufficient balance",
  "balance": 50000
}

400

Bad Request - Minimum amount

{
  "success": false,
  "error": "Minimum amount is Rp 10,000 for bank transfer",
  "balance": 50000
}

400

Account validation failed

{
  "success": false,
  "message": "Failed to check account name"
}

500

Internal Server Error

{
  "success": false,
  "message": "An error occurred processing the request"
}

Execute Bank Transfer

POST

/api/v1/accounts/{id}/transfer

Execute bank transfer

Parameters

id

Required

string

DANA account ID

Name	Type	Required	Description
id	`string`	Required	DANA account ID

Request Body

Required

Bank transfer execution data

application/json

{
  "action": "dana-bank-create",
  "bankAccountIndexNo": "abc123def456",
  "amount": "100000"
}

Example Request

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts/{id}/transfer' \
  -H 'x-api-key: YOUR_API_KEY'\
  -H 'Content-Type: application/json' \
  -d '{
    "action": "dana-bank-create",
    "bankAccountIndexNo": "abc123def456",
    "amount": "100000"
  }'

Usage Examples

Execute Bank Transfer

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts/123e4567-e89b-12d3-a456-426614174000' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "action": "dana-bank-create",
    "bankAccountIndexNo": "abc123def456",
    "amount": "100000"
  }'

Responses

200

Transfer executed successfully

{
  "success": true,
  "message": "Transfer successfully"
}

400

Bad Request - Missing required fields

{
  "success": false,
  "message": "Missing required fields: bankAccountIndexNo are required"
}

400

Bad Request - Insufficient balance

{
  "success": false,
  "error": "Insufficient balance",
  "balance": 50000
}

400

Bad Request - Minimum amount

{
  "success": false,
  "error": "Minimum amount is Rp 10,000 for bank transfer",
  "balance": 50000
}

500

Transfer execution failed

{
  "success": false,
  "message": "Failed to execute transfer"
}

Getting Started

Learn how to integrate Mutasiku API into your application.

Authentication

Learn how to authenticate your API requests

All API requests require authentication using an API key. You can obtain your API key from your dashboard.

Include your API key in all requests using the x-api-key header.

curl -H 'x-api-key: YOUR_API_KEY' https://mutasiku.co.id/api/mutations

API Reference

Explore our API endpoints and their capabilities.

Provider API

Retrieve available bank and e-wallet providers.

List Providers

GET

/api/v1/provider

Retrieve a list of available banks and e-wallets to be used for account creation.

Parameters

type

Optional

string

Filter by provider type: 'bank' or 'ewallet'. If not provided, returns both types.

isActive

Optional

boolean

Filter by provider status: true for active providers, false for inactive providers

search

Optional

string

Search by provider name or code

Name	Type	Required	Description
type	`string`	Optional	Filter by provider type: 'bank' or 'ewallet'. If not provided, returns both types.
isActive	`boolean`	Optional	Filter by provider status: true for active providers, false for inactive providers
search	`string`	Optional	Search by provider name or code

Example Request

curl -X GET \
  'https://mutasiku.co.id/api/v1/provider' \
  -H 'x-api-key: YOUR_API_KEY'

Usage Examples

Get All Providers

curl -X GET \
  'https://mutasiku.co.id/api/v1/provider' \
  -H 'x-api-key: YOUR_API_KEY'

Get Only Banks

curl -X GET \
  'https://mutasiku.co.id/api/v1/provider?type=bank' \
  -H 'x-api-key: YOUR_API_KEY'

Get Only Active E-Wallets

curl -X GET \
  'https://mutasiku.co.id/api/v1/provider?type=ewallet&isActive=true' \
  -H 'x-api-key: YOUR_API_KEY'

Search for Providers

curl -X GET \
  'https://mutasiku.co.id/api/v1/provider?search=bank' \
  -H 'x-api-key: YOUR_API_KEY'

Responses

200

Successful response

{
  "status": "success",
  "data": {
    "banks": [
    {
      "id": "bank-id-123",
      "name": "Bank Central Asia",
      "code": "BCA",
      "isActive": true,
      "pointCost": 500
    },
    {
      "id": "bank-id-456",
      "name": "Bank Mandiri",
      "code": "MANDIRI",
      "isActive": true,
      "pointCost": 500
    }
    ],
    "ewallets": [
    {
      "id": "ewallet-id-123",
      "name": "DANA",
      "code": "DANA",
      "isActive": true,
      "pointCost": 1000
    },
    {
      "id": "ewallet-id-456",
      "name": "OVO",
      "code": "OVO",
      "isActive": true,
      "pointCost": 1000
    },
    {
      "id": "ewallet-id-789",
      "name": "GOPAY Merchant",
      "code": "GOPAY-MERCHANT",
      "isActive": true,
      "pointCost": 1500
    }
    ]
  }
}

401

Unauthorized - Invalid or missing API key

{
  "status": "error",
  "error": "Missing API key"
}

500

Internal Server Error

{
  "status": "error",
  "error": "Internal server error"
}

Accounts API

Retrieve bank and e-wallet accounts.

List Accounts

GET

/api/v1/accounts

Retrieve bank and e-wallet accounts with filtering, searching, and pagination options.

Parameters

type

Optional

string

Filter by account type: 'bank' or 'ewallet'. If not provided, returns both types.

isActive

Optional

boolean

Filter by account status: true for active accounts, false for inactive accounts

providerCode

Optional

string

Filter by provider code (bank or e-wallet code)

search

Optional

string

Search in account number, account name, provider name, or phone number

page

Optional

number

Page number for pagination (default: 1)

limit

Optional

number

Number of items per page (default: 10, max: 100)

Name	Type	Required	Description
type	`string`	Optional	Filter by account type: 'bank' or 'ewallet'. If not provided, returns both types.
isActive	`boolean`	Optional	Filter by account status: true for active accounts, false for inactive accounts
providerCode	`string`	Optional	Filter by provider code (bank or e-wallet code)
search	`string`	Optional	Search in account number, account name, provider name, or phone number
page	`number`	Optional	Page number for pagination (default: 1)
limit	`number`	Optional	Number of items per page (default: 10, max: 100)

Example Request

curl -X GET \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY'

Usage Examples

Get All Accounts

curl -X GET \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY'

Filter by Account Type

curl -X GET \
  'https://mutasiku.co.id/api/v1/accounts?type=ewallet' \
  -H 'x-api-key: YOUR_API_KEY'

Filter Active Accounts with Provider

curl -X GET \
  'https://mutasiku.co.id/api/v1/accounts?isActive=true&providerCode=DANA' \
  -H 'x-api-key: YOUR_API_KEY'

Search with Pagination

curl -X GET \
  'https://mutasiku.co.id/api/v1/accounts?search=john&page=2&limit=20' \
  -H 'x-api-key: YOUR_API_KEY'

Responses

200

Successful response

{
  "status": "success",
  "data": [
    {
    "id": "123e4567-e89b-12d3-a456-426614174000",
    "type": "ewallet",
    "name": "John Doe",
    "phoneNumber": "+62-85157367702",
    "balance": 100000,
    "lastSync": "2024-02-12T08:30:00.000Z",
    "intervalMinutes": 15,
    "isActive": true,
    "provider": {
      "id": "ewallet-id-123",
      "name": "DANA",
      "code": "DANA",
      "isActive": true,
      "pointCost": 1000
    }
    },
    {
    "id": "123e4567-e89b-12d3-a456-426614174001",
    "type": "bank",
    "name": "John Doe",
    "accountNumber": "1234567890",
    "balance": 5000000,
    "lastSync": "2024-02-12T08:30:00.000Z",
    "intervalMinutes": 30,
    "isActive": true,
    "provider": {
      "id": "bank-id-123",
      "name": "Bank Central Asia",
      "code": "BCA",
      "isActive": true,
      "pointCost": 500
    }
    }
  ],
  "pagination": {
    "total": 50,
    "page": 1,
    "limit": 10,
    "totalPages": 5,
    "hasMore": true
  }
}

400

Bad Request - Invalid parameters

{
  "status": "error",
  "error": "Validation error",
  "details": [
    {
    "code": "invalid_type",
    "path": [
      "isActive"
    ],
    "message": "Expected boolean, received string"
    }
  ]
}

401

Unauthorized - Invalid or missing API key

{
  "status": "error",
  "error": "Missing API key"
}

404

Not Found - Record not found

{
  "status": "error",
  "error": "Record not found"
}

500

Internal Server Error

{
  "status": "error",
  "error": "Internal server error"
}

Create Account

POST

/api/v1/accounts

Create a new bank or e-wallet account. Note that special providers like OVO and GOPAY-MERCHANT require a different authentication flow.

Request Body

Required

Account creation data

application/json

{
  "type": "bank",
  "providerCode": "BCA",
  "accountNumber": "1234567890",
  "accountName": "John Doe",
  "username": "johndoe",
  "password": "secretpass",
  "intervalMinutes": 5
}

Example Request

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY'\
  -H 'Content-Type: application/json' \
  -d '{
    "type": "bank",
    "providerCode": "BCA",
    "accountNumber": "1234567890",
    "accountName": "John Doe",
    "username": "johndoe",
    "password": "secretpass",
    "intervalMinutes": 5
  }'

Usage Examples

Create Bank Account

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "type": "bank",
    "providerCode": "BCA",
    "accountNumber": "1234567890",
    "accountName": "John Doe",
    "username": "johndoe",
    "password": "secretpass",
    "intervalMinutes": 5
  }'

Create E-Wallet Account

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "type": "ewallet",
    "providerCode": "DANA",
    "phoneNumber": "081234567890",
    "accountName": "John Doe",
    "pin": "secretpin",
    "intervalMinutes": 5
  }'

Responses

200

Successful response for regular account creation

{
  "status": "success",
  "data": {
    "accountId": "123e4567-e89b-12d3-a456-426614174000"
  }
}

200

Special flow response for OVO accounts

{
  "status": "special_flow",
  "message": "This provider requires a special verification flow",
  "provider": "OVO",
  "providerCode": "OVO",
  "nextAction": {
    "action": "ovo-send-otp",
    "requiredData": {
    "phoneNumber": "081234567890",
    "providerCode": "OVO",
    "accountName": "My OVO Account",
    "intervalMinutes": 5
    }
  }
}

200

Special flow response for GOPAY-MERCHANT accounts

{
  "status": "special_flow",
  "message": "This provider requires a special verification flow",
  "provider": "GOPAY-MERCHANT",
  "providerCode": "GOPAY-MERCHANT",
  "nextAction": {
    "action": "gopay-merchant-send-otp",
    "requiredData": {
    "phoneNumber": "081234567890",
    "providerCode": "GOPAY-MERCHANT",
    "accountName": "My GOPAY Merchant Account",
    "intervalMinutes": 5
    }
  }
}

400

Bad Request - Invalid parameters

{
  "status": "error",
  "error": "Validation error",
  "details": [
    {
    "code": "invalid_enum_value",
    "path": [
      "type"
    ],
    "message": "Expected 'bank' or 'ewallet', received 'wallet'"
    }
  ]
}

400

Bad Request - Insufficient points

{
  "status": "error",
  "error": "Insufficient points. You need 1000 points, but you have 500 points."
}

401

Unauthorized - Invalid or missing API key

{
  "status": "error",
  "error": "Missing API key"
}

404

Not Found - Provider not found

{
  "status": "error",
  "error": "Provider not found"
}

500

Internal Server Error

{
  "status": "error",
  "error": "Internal server error"
}

Get Account Details

GET

/api/v1/accounts/{id}

Retrieve detailed information about a specific account.

Parameters

id

Required

string

The account ID

Name	Type	Required	Description
id	`string`	Required	The account ID

Example Request

curl -X GET \
  'https://mutasiku.co.id/api/v1/accounts/{id}' \
  -H 'x-api-key: YOUR_API_KEY'

Usage Examples

Get Account Details

curl -X GET \
  'https://mutasiku.co.id/api/v1/accounts/123e4567-e89b-12d3-a456-426614174000' \
  -H 'x-api-key: YOUR_API_KEY'

Responses

200

Successful response

{
  "status": "success",
  "data": {
    "id": "123e4567-e89b-12d3-a456-426614174000",
    "type": "ewallet",
    "name": "John Doe",
    "phoneNumber": "+62-85157367702",
    "balance": 100000,
    "lastSync": "2024-02-12T08:30:00.000Z",
    "intervalMinutes": 15,
    "isActive": true,
    "username": "johndoe",
    "provider": {
    "id": "ewallet-id-123",
    "name": "DANA",
    "code": "DANA",
    "isActive": true,
    "pointCost": 1000
    }
  }
}

401

Unauthorized - Invalid or missing API key

{
  "status": "error",
  "error": "Missing API key"
}

404

Not Found - Account not found

{
  "status": "error",
  "error": "Account not found"
}

500

Internal Server Error

{
  "status": "error",
  "error": "Internal server error"
}

Update Account

PATCH

/api/v1/accounts/{id}

Update account information. Note that changing phone number for OVO or GOPAY-MERCHANT accounts requires re-authentication.

Parameters

id

Required

string

The account ID

Name	Type	Required	Description
id	`string`	Required	The account ID

Request Body

Required

Fields to update

application/json

{
  "accountName": "John Smith",
  "intervalMinutes": 10,
  "username": "johnsmith",
  "password": "newsecretpass"
}

Example Request

curl -X PATCH \
  'https://mutasiku.co.id/api/v1/accounts/{id}' \
  -H 'x-api-key: YOUR_API_KEY'\
  -H 'Content-Type: application/json' \
  -d '{
    "accountName": "John Smith",
    "intervalMinutes": 10,
    "username": "johnsmith",
    "password": "newsecretpass"
  }'

Usage Examples

Update Account Name and Interval

curl -X PATCH \
  'https://mutasiku.co.id/api/v1/accounts/123e4567-e89b-12d3-a456-426614174000' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "accountName": "John Smith",
    "intervalMinutes": 10
  }'

Update Login Credentials

curl -X PATCH \
  'https://mutasiku.co.id/api/v1/accounts/123e4567-e89b-12d3-a456-426614174000' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "username": "johnsmith",
    "password": "newsecretpass"
  }'

Responses

200

Successful response for regular update

{
  "status": "success",
  "message": "Account updated successfully"
}

200

Special flow response for phone number change requiring re-authentication

{
  "status": "special_flow",
  "message": "Changing phone number requires re-authentication",
  "provider": "OVO",
  "providerCode": "OVO",
  "accountId": "123e4567-e89b-12d3-a456-426614174000",
  "nextAction": {
    "action": "ovo-send-otp",
    "requiredData": {
    "accountId": "123e4567-e89b-12d3-a456-426614174000",
    "phoneNumber": "081234567890",
    "providerCode": "OVO"
    }
  }
}

400

Bad Request - Invalid parameters

{
  "status": "error",
  "error": "Validation error",
  "details": [
    {
    "code": "invalid_type",
    "path": [
      "intervalMinutes"
    ],
    "message": "Expected number, received string"
    }
  ]
}

401

Unauthorized - Invalid or missing API key

{
  "status": "error",
  "error": "Missing API key"
}

404

Not Found - Account not found

{
  "status": "error",
  "error": "Account not found"
}

500

Internal Server Error

{
  "status": "error",
  "error": "Internal server error"
}

Delete Account

DELETE

/api/v1/accounts/{id}

Delete an account. This operation cannot be undone.

Parameters

id

Required

string

The account ID

Name	Type	Required	Description
id	`string`	Required	The account ID

Example Request

curl -X DELETE \
  'https://mutasiku.co.id/api/v1/accounts/{id}' \
  -H 'x-api-key: YOUR_API_KEY'

Usage Examples

Delete Account

curl -X DELETE \
  'https://mutasiku.co.id/api/v1/accounts/123e4567-e89b-12d3-a456-426614174000' \
  -H 'x-api-key: YOUR_API_KEY'

Responses

200

Successful response

{
  "status": "success",
  "message": "Account deleted successfully"
}

401

Unauthorized - Invalid or missing API key

{
  "status": "error",
  "error": "Missing API key"
}

404

Not Found - Account not found

{
  "status": "error",
  "error": "Account not found"
}

500

Internal Server Error

{
  "status": "error",
  "error": "Internal server error"
}

Refresh Account

GET

/api/v1/accounts/{id}/refresh

Trigger a manual refresh of the account balance and transactions.

Parameters

id

Required

string

The account ID

Name	Type	Required	Description
id	`string`	Required	The account ID

Example Request

curl -X GET \
  'https://mutasiku.co.id/api/v1/accounts/{id}/refresh' \
  -H 'x-api-key: YOUR_API_KEY'

Usage Examples

Refresh Account

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts/123e4567-e89b-12d3-a456-426614174000/refresh' \
  -H 'x-api-key: YOUR_API_KEY'

Responses

200

Successful response

{
  "status": "success",
  "message": "Account refreshed successfully"
}

400

Bad Request - Account or provider is inactive

{
  "status": "error",
  "error": "Account is inactive"
}

401

Unauthorized - Invalid or missing API key

{
  "status": "error",
  "error": "Missing API key"
}

404

Not Found - Account not found

{
  "status": "error",
  "error": "Account not found"
}

500

Internal Server Error

{
  "status": "error",
  "error": "Internal server error"
}

DANA Accounts API

Authenticate and manage DANA accounts.

Send OTP

POST

/api/v1/accounts

Step 1: Send OTP for DANA account creation or relogin or update

Request Body

Required

DANA OTP request data

application/json

// For new account
{
  "action": "dana-send-otp",
  "phoneNumber": "081234567890",
  "pin": "123456",
  "providerCode": "DANA",
  "accountName": "My DANA Account",
  "intervalMinutes": 5,
  "verificationMethod": "WhatsApp or SMS"
}

// For relogin or update
{
  "action": "dana-send-otp",
  "phoneNumber": "081234567890",
  "pin": "123456",
  "accountId": "123e4567-e89b-12d3-a456-426614174000",
  "verificationMethod": "WhatsApp or SMS"
}

Example Request

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY'\
  -H 'Content-Type: application/json' \
  -d '// For new account
  {
    "action": "dana-send-otp",
    "phoneNumber": "081234567890",
    "pin": "123456",
    "providerCode": "DANA",
    "accountName": "My DANA Account",
    "intervalMinutes": 5,
    "verificationMethod": "WhatsApp or SMS"
  }
  
  // For relogin or update
  {
    "action": "dana-send-otp",
    "phoneNumber": "081234567890",
    "pin": "123456",
    "accountId": "123e4567-e89b-12d3-a456-426614174000",
    "verificationMethod": "WhatsApp or SMS"
  }'

Usage Examples

Send OTP for New DANA Account

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "action": "dana-send-otp",
    "phoneNumber": "081234567890",
    "pin": "123456",
    "providerCode": "DANA",
    "accountName": "My DANA Account",
    "intervalMinutes": 5,
    "verificationMethod": "WhatsApp or SMS"
  }'

Send OTP for DANA Account Relogin or update

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "action": "dana-send-otp",
    "phoneNumber": "081234567890",
    "pin": "123456",
    "accountId": "123e4567-e89b-12d3-a456-426614174000",
    "verificationMethod": "WhatsApp or SMS"
  }'

Responses

200

Successful response

{
  "success": true,
  "sessionId": "123e4567-e89b-12d3-a456-426614174000",
  "message": "OTP has been sent to your phone"
}

400

Bad Request - Missing required fields

{
  "success": false,
  "message": "Missing required fields: For new accounts, phoneNumber, pin, providerCode, accountName, and intervalMinutes are required"
}

400

Bad Request - Provider not found or unavailable

{
  "success": false,
  "message": "Provider not found"
}

500

Internal Server Error

{
  "success": false,
  "message": "DANA API error: Internal Server Error"
}

Verify OTP

POST

/api/v1/accounts

Step 2: Verify OTP for DANA account creation or relogin or update

Request Body

Required

DANA OTP verification data

application/json

// For new account
{
  "action": "dana-verify-otp",
  "sessionId": "123e4567-e89b-12d3-a456-426614174000",
  "otp": "1234"
}

// For relogin or update
{
  "action": "dana-verify-otp",
  "sessionId": "123e4567-e89b-12d3-a456-426614174000",
  "accountId": "123e4567-e89b-12d3-a456-426614174001",
  "otp": "1234"
}

Example Request

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY'\
  -H 'Content-Type: application/json' \
  -d '// For new account
  {
    "action": "dana-verify-otp",
    "sessionId": "123e4567-e89b-12d3-a456-426614174000",
    "otp": "1234"
  }
  
  // For relogin or update
  {
    "action": "dana-verify-otp",
    "sessionId": "123e4567-e89b-12d3-a456-426614174000",
    "accountId": "123e4567-e89b-12d3-a456-426614174001",
    "otp": "1234"
  }'

Usage Examples

Verify OTP for New DANA Account

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "action": "dana-verify-otp",
    "sessionId": "123e4567-e89b-12d3-a456-426614174000",
    "otp": "1234"
  }'

Verify OTP for DANA Account Relogin or update

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "action": "dana-verify-otp",
    "sessionId": "123e4567-e89b-12d3-a456-426614174000",
    "accountId": "123e4567-e89b-12d3-a456-426614174001",
    "otp": "1234"
  }'

Responses

200

Successful response

{
  "success": true,
  "accountId": "123e4567-e89b-12d3-a456-426614174000"
}

400

Bad Request - Missing required verification data

{
  "success": false,
  "message": "Missing required verification data"
}

400

Bad Request - Session expired or not found

{
  "success": false,
  "message": "Session expired or not found. Please try the verification process again."
}

400

Bad Request - Verification failed

{
  "success": false,
  "message": "Verification failed"
}

500

Internal Server Error

{
  "success": false,
  "message": "DANA API error: Internal Server Error"
}

OVO Accounts API

Authenticate and manage OVO accounts.

Send OTP

POST

/api/v1/accounts

Step 1: Send OTP for OVO account creation or relogin or update

Request Body

Required

OVO OTP request data

application/json

// For new account
{
  "action": "ovo-send-otp",
  "phoneNumber": "081234567890",
  "providerCode": "OVO",
  "accountName": "My OVO Account",
  "intervalMinutes": 5,
  "verificationMethod": "WhatsApp or SMS"
}

// For relogin or update
{
  "action": "ovo-send-otp",
  "phoneNumber": "081234567890",
  "accountId": "123e4567-e89b-12d3-a456-426614174000",
  "verificationMethod": "WhatsApp or SMS"
}

Example Request

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY'\
  -H 'Content-Type: application/json' \
  -d '// For new account
  {
    "action": "ovo-send-otp",
    "phoneNumber": "081234567890",
    "providerCode": "OVO",
    "accountName": "My OVO Account",
    "intervalMinutes": 5,
    "verificationMethod": "WhatsApp or SMS"
  }
  
  // For relogin or update
  {
    "action": "ovo-send-otp",
    "phoneNumber": "081234567890",
    "accountId": "123e4567-e89b-12d3-a456-426614174000",
    "verificationMethod": "WhatsApp or SMS"
  }'

Usage Examples

Send OTP for New OVO Account

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "action": "ovo-send-otp",
    "phoneNumber": "081234567890",
    "providerCode": "OVO",
    "accountName": "My OVO Account",
    "intervalMinutes": 5,
    "verificationMethod": "WhatsApp or SMS"
  }'

Send OTP for OVO Account Relogin or update

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "action": "ovo-send-otp",
    "phoneNumber": "081234567890",
    "accountId": "123e4567-e89b-12d3-a456-426614174000",
    "verificationMethod": "WhatsApp or SMS"
  }'

Responses

200

Successful response

{
  "success": true,
  "sessionId": "123e4567-e89b-12d3-a456-426614174000",
  "message": "OTP has been sent to your phone"
}

400

Bad Request - Missing required fields

{
  "success": false,
  "message": "Missing required fields: For new accounts, phoneNumber, providerCode, accountName, and intervalMinutes are required"
}

400

Bad Request - Provider not found or unavailable

{
  "success": false,
  "message": "Provider not found"
}

500

Internal Server Error

{
  "success": false,
  "message": "OVO API error: Internal Server Error"
}

Verify OTP

POST

/api/v1/accounts

Step 2: Verify OTP for OVO account creation or relogin or update

Request Body

Required

OVO OTP verification data

application/json

// For new account
{
  "action": "ovo-verify-otp",
  "sessionId": "123e4567-e89b-12d3-a456-426614174000",
  "otp": "123456",
  "pin": "123456"
}

// For relogin or update
{
  "action": "ovo-verify-otp",
  "sessionId": "123e4567-e89b-12d3-a456-426614174000",
  "accountId": "123e4567-e89b-12d3-a456-426614174001",
  "otp": "123456",
  "pin": "123456"
}

Example Request

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY'\
  -H 'Content-Type: application/json' \
  -d '// For new account
  {
    "action": "ovo-verify-otp",
    "sessionId": "123e4567-e89b-12d3-a456-426614174000",
    "otp": "123456",
    "pin": "123456"
  }
  
  // For relogin or update
  {
    "action": "ovo-verify-otp",
    "sessionId": "123e4567-e89b-12d3-a456-426614174000",
    "accountId": "123e4567-e89b-12d3-a456-426614174001",
    "otp": "123456",
    "pin": "123456"
  }'

Usage Examples

Verify OTP for New OVO Account

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "action": "ovo-verify-otp",
    "sessionId": "123e4567-e89b-12d3-a456-426614174000",
    "otp": "123456",
    "pin": "123456"
  }'

Verify OTP for OVO Account Relogin or update

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "action": "ovo-verify-otp",
    "sessionId": "123e4567-e89b-12d3-a456-426614174000",
    "accountId": "123e4567-e89b-12d3-a456-426614174001",
    "otp": "123456",
    "pin": "123456"
  }'

Responses

200

Successful response

{
  "success": true,
  "accountId": "123e4567-e89b-12d3-a456-426614174000"
}

400

Bad Request - Missing required verification data

{
  "success": false,
  "message": "Missing required verification data"
}

400

Bad Request - Session expired or not found

{
  "success": false,
  "message": "Session expired or not found. Please try the verification process again."
}

400

Bad Request - Verification failed

{
  "success": false,
  "message": "Verification failed"
}

500

Internal Server Error

{
  "success": false,
  "message": "OVO API error: Internal Server Error"
}

GoPay Merchant API

Authenticate and manage GoPay Merchant accounts.

Send OTP

POST

/api/v1/accounts

Step 1: Send OTP for GOPAY-MERCHANT account creation or relogin or update

Request Body

Required

GOPAY-MERCHANT OTP request data

application/json

// For new account
{
  "action": "gopay-merchant-send-otp",
  "phoneNumber": "081234567890",
  "providerCode": "GOPAY-MERCHANT",
  "accountName": "My GOPAY Merchant Account",
  "intervalMinutes": 5,
  "verificationMethod": "WhatsApp or SMS"
}

// For relogin or update
{
  "action": "gopay-merchant-send-otp",
  "phoneNumber": "081234567890",
  "accountId": "123e4567-e89b-12d3-a456-426614174000",
  "verificationMethod": "WhatsApp or SMS"
}

Example Request

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY'\
  -H 'Content-Type: application/json' \
  -d '// For new account
  {
    "action": "gopay-merchant-send-otp",
    "phoneNumber": "081234567890",
    "providerCode": "GOPAY-MERCHANT",
    "accountName": "My GOPAY Merchant Account",
    "intervalMinutes": 5,
    "verificationMethod": "WhatsApp or SMS"
  }
  
  // For relogin or update
  {
    "action": "gopay-merchant-send-otp",
    "phoneNumber": "081234567890",
    "accountId": "123e4567-e89b-12d3-a456-426614174000",
    "verificationMethod": "WhatsApp or SMS"
  }'

Usage Examples

Send OTP for New GOPAY-MERCHANT Account

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "action": "gopay-merchant-send-otp",
    "phoneNumber": "081234567890",
    "providerCode": "GOPAY-MERCHANT",
    "accountName": "My GOPAY Merchant Account",
    "intervalMinutes": 5,
    "verificationMethod": "WhatsApp or SMS"
  }'

Send OTP for GOPAY-MERCHANT Account Relogin or update

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "action": "gopay-merchant-send-otp",
    "phoneNumber": "081234567890",
    "accountId": "123e4567-e89b-12d3-a456-426614174000",
    "verificationMethod": "WhatsApp or SMS"
  }'

Responses

200

Successful response

{
  "success": true,
  "sessionId": "123e4567-e89b-12d3-a456-426614174000",
  "message": "OTP has been sent to your phone"
}

400

Bad Request - Missing required fields

{
  "success": false,
  "message": "Missing required fields: phoneNumber, providerCode, accountName, and intervalMinutes are required"
}

400

Bad Request - Provider not found or unavailable

{
  "success": false,
  "message": "Provider is currently unavailable"
}

400

Bad Request - Login failed

{
  "success": false,
  "message": "Login failed"
}

500

Internal Server Error

{
  "success": false,
  "message": "An error occurred processing the request"
}

Verify OTP

POST

/api/v1/accounts

Step 2: Verify OTP for GOPAY-MERCHANT account creation or relogin or update

Request Body

Required

GOPAY-MERCHANT OTP verification data

application/json

// For new account
{
  "action": "gopay-merchant-verify-otp",
  "sessionId": "123e4567-e89b-12d3-a456-426614174000",
  "otp": "123456"
}

// For relogin or update
{
  "action": "gopay-merchant-verify-otp",
  "sessionId": "123e4567-e89b-12d3-a456-426614174000",
  "accountId": "123e4567-e89b-12d3-a456-426614174001",
  "otp": "123456"
}

Example Request

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY'\
  -H 'Content-Type: application/json' \
  -d '// For new account
  {
    "action": "gopay-merchant-verify-otp",
    "sessionId": "123e4567-e89b-12d3-a456-426614174000",
    "otp": "123456"
  }
  
  // For relogin or update
  {
    "action": "gopay-merchant-verify-otp",
    "sessionId": "123e4567-e89b-12d3-a456-426614174000",
    "accountId": "123e4567-e89b-12d3-a456-426614174001",
    "otp": "123456"
  }'

Usage Examples

Verify OTP for New GOPAY-MERCHANT Account

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "action": "gopay-merchant-verify-otp",
    "sessionId": "123e4567-e89b-12d3-a456-426614174000",
    "otp": "123456"
  }'

Verify OTP for GOPAY-MERCHANT Account Relogin or update

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "action": "gopay-merchant-verify-otp",
    "sessionId": "123e4567-e89b-12d3-a456-426614174000",
    "accountId": "123e4567-e89b-12d3-a456-426614174001",
    "otp": "123456"
  }'

Responses

200

Successful response

{
  "success": true,
  "accountId": "123e4567-e89b-12d3-a456-426614174000"
}

200

Response requiring second OTP

{
  "success": false,
  "requireSecondOTP": true,
  "sessionId": "123e4567-e89b-12d3-a456-426614174001",
  "message": "Second verification code is required"
}

400

Bad Request - Missing required verification data

{
  "success": false,
  "message": "Missing required verification data"
}

400

Bad Request - Session expired or not found

{
  "success": false,
  "message": "Session expired or not found. Please try the verification process again."
}

400

Bad Request - OTP verification failed

{
  "success": false,
  "message": "OTP verification failed"
}

500

Internal Server Error

{
  "success": false,
  "message": "An error occurred processing the request"
}

Mutations API

Retrieve and monitor bank and e-wallet transaction data.

List Mutations

GET

/api/v1/mutations

Retrieve bank and e-wallet transaction data with comprehensive filtering, searching, and pagination options.

Parameters

accountId

Optional

string

Filter by specific account ID (bank or wallet account)

accountType

Optional

string

Filter by account type: 'bank' or 'wallet'

type

Optional

string

Filter by transaction type: 'CREDIT', 'DEBIT'. Case sensitive.

search

Optional

string

Search in transaction description, bank account number, or wallet phone number

startDate

Optional

string (YYYY-MM-DD)

Filter transactions from this date (inclusive)

endDate

Optional

string (YYYY-MM-DD)

Filter transactions until this date (inclusive)

minAmount

Optional

number

Minimum transaction amount

maxAmount

Optional

number

Maximum transaction amount

page

Optional

number

Page number for pagination (default: 1)

limit

Optional

number

Number of items per page (default: 10, max: 100)

Name	Type	Required	Description
accountId	`string`	Optional	Filter by specific account ID (bank or wallet account)
accountType	`string`	Optional	Filter by account type: 'bank' or 'wallet'
type	`string`	Optional	Filter by transaction type: 'CREDIT', 'DEBIT'. Case sensitive.
search	`string`	Optional	Search in transaction description, bank account number, or wallet phone number
startDate	`string (YYYY-MM-DD)`	Optional	Filter transactions from this date (inclusive)
endDate	`string (YYYY-MM-DD)`	Optional	Filter transactions until this date (inclusive)
minAmount	`number`	Optional	Minimum transaction amount
maxAmount	`number`	Optional	Maximum transaction amount
page	`number`	Optional	Page number for pagination (default: 1)
limit	`number`	Optional	Number of items per page (default: 10, max: 100)

Example Request

curl -X GET \
  'https://mutasiku.co.id/api/v1/mutations' \
  -H 'x-api-key: YOUR_API_KEY'

Usage Examples

Filter by Date Range

curl -X GET \
  'https://mutasiku.co.id/api/v1/mutations?startDate=2024-01-28&endDate=2025-03-06' \
  -H 'x-api-key: YOUR_API_KEY'

Filter by Account Type and Transaction Type

curl -X GET \
  'https://mutasiku.co.id/api/v1/mutations?accountType=wallet&type=CREDIT' \
  -H 'x-api-key: YOUR_API_KEY'

Search with Amount Range

curl -X GET \
  'https://mutasiku.co.id/api/v1/mutations?search=transfer&minAmount=10000&maxAmount=1000000' \
  -H 'x-api-key: YOUR_API_KEY'

Complex Filter Combination

curl -X GET \
  'https://mutasiku.co.id/api/v1/mutations?accountType=bank&type=DEBIT&startDate=2024-01-28 \
  &endDate=2025-03-06&minAmount=10000&search=withdrawal&page=2&limit=20' \
  -H 'x-api-key: YOUR_API_KEY'

Responses

200

Successful response

{
  "status": "success",
  "data": [
    {
    "id": "af0ab8bd-3051-411e-81d1-7e9a384e1d30",
    "amount": 39921,
    "type": "DEBIT",
    "description": "Kirim Uang",
    "senderName": "Ahmad Rahmat",
    "recipientName": "Siti Nurhaliza",
    "status": "SUCCESS",
    "createdAt": "2024-11-18T11:41:28.000Z",
    "account": {
      "type": "wallet",
      "id": "949382b6-f5e8-461f-88fc-d4f37fc62c22",
      "phoneNumber": "+62-85157367702",
      "accountName": "Test",
      "provider": {
        "name": "DANA",
        "code": "DANA"
      }
    },
    "payment": {
      "orderId": "ORD123",
      "customerName": "John Doe",
      "customerEmail": "john@example.com",
      "customerPhone": "+62-8123456789",
      "metadata": {
        "additional": "info"
      }
    }
    }
  ],
  "pagination": {
    "total": 50,
    "page": 1,
    "limit": 10,
    "totalPages": 5,
    "hasMore": true
  }
}

400

Bad Request - Invalid parameters

{
  "status": "error",
  "error": "Validation error",
  "details": [
    {
    "code": "invalid_date",
    "path": [
      "startDate"
    ],
    "message": "Invalid date format"
    }
  ]
}

401

Unauthorized - Invalid or missing API key

{
  "status": "error",
  "error": "Missing API key"
}

404

Not Found - Record not found

{
  "status": "error",
  "error": "Record not found"
}

500

Internal Server Error

{
  "status": "error",
  "error": "Internal server error"
}

Payments API

Create and check payment transactions.

Create Payment

POST

/api/v1/payments

Create a new payment request for QRIS transactions, Virtual Accounts, or Direct payments.

Important Information

Payment Types by Provider

QRIS Image

Parameters

amount

Required

number

Payment amount in IDR

walletAccountId

Required

string

UUID of the wallet account to receive the payment

redirectUrl

Required

string

URL to redirect user after payment completion

orderId

Required

string

Your unique order identifier

type

Required

string

Name	Type	Required	Description
amount	`number`	Required	Payment amount in IDR
walletAccountId	`string`	Required	UUID of the wallet account to receive the payment
redirectUrl	`string`	Required	URL to redirect user after payment completion
orderId	`string`	Required	Your unique order identifier
type	`string`	Required	Payment type. Available types: 'DIRECT', 'VA-BCA', 'VA-MANDIRI', 'VA-PERMATA', 'QRIS', 'QRIS-DYNAMIC'. Note: GOPAY-MERCHANT only supports 'QRIS' and 'QRIS-DYNAMIC'. GRAB-MERCHANT only supports 'QRIS'. DANA only supports 'DIRECT', 'VA-BCA', 'VA-MANDIRI', 'VA-PERMATA', 'QRIS', and 'QRIS-DYNAMIC'.

Example Request

curl -X POST \
  'https://mutasiku.co.id/api/v1/payments' \
  -H 'x-api-key: YOUR_API_KEY'

Usage Examples

Create QRIS Payment (GoPay Merchant)

curl -X POST \
  'https://mutasiku.co.id/api/v1/payments' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
  "amount": 20000,
  "walletAccountId": "9a4f62d1-5d21-49ad-a5a9-1a77a6ba5b74",
  "redirectUrl": "https://merchant.com/order/success?id=123",
  "orderId": "order-123",
  "type": "QRIS"
}'

Create QRIS Dynamic Payment (GoPay Merchant)

curl -X POST \
  'https://mutasiku.co.id/api/v1/payments' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
  "amount": 50000,
  "walletAccountId": "9a4f62d1-5d21-49ad-a5a9-1a77a6ba5b74",
  "redirectUrl": "https://merchant.com/order/success?id=456",
  "orderId": "order-456",
  "type": "QRIS-DYNAMIC"
}'

Create QRIS Payment (Grab Merchant)

curl -X POST \
  'https://mutasiku.co.id/api/v1/payments' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
  "amount": 30000,
  "walletAccountId": "7b3c45a2-6e32-4acd-b8fa-2b88c7da6c85",
  "redirectUrl": "https://merchant.com/order/success?id=789",
  "orderId": "order-789",
  "type": "QRIS"
}'

Create Virtual Account Payment - BCA (DANA)

curl -X POST \
  'https://mutasiku.co.id/api/v1/payments' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
  "amount": 100000,
  "walletAccountId": "3d5e67f8-9a12-4bcd-c3de-4f99d8ea7f96",
  "redirectUrl": "https://merchant.com/order/success?id=101",
  "orderId": "order-101",
  "type": "VA-BCA"
}'

Create Virtual Account Payment - Mandiri (DANA)

curl -X POST \
  'https://mutasiku.co.id/api/v1/payments' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
  "amount": 150000,
  "walletAccountId": "3d5e67f8-9a12-4bcd-c3de-4f99d8ea7f96",
  "redirectUrl": "https://merchant.com/order/success?id=102",
  "orderId": "order-102",
  "type": "VA-MANDIRI"
}'

Create Direct Payment (DANA)

curl -X POST \
  'https://mutasiku.co.id/api/v1/payments' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
  "amount": 75000,
  "walletAccountId": "3d5e67f8-9a12-4bcd-c3de-4f99d8ea7f96",
  "redirectUrl": "https://merchant.com/order/success?id=202",
  "orderId": "order-202",
  "type": "DIRECT"
}'

Create QRIS Payment (DANA BISNIS)

curl -X POST \
  'https://mutasiku.co.id/api/v1/payments' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
  "amount": 45000,
  "walletAccountId": "3d5e67f8-9a12-4bcd-c3de-4f99d8ea7f96",
  "redirectUrl": "https://merchant.com/order/success?id=303",
  "orderId": "order-303",
  "type": "QRIS"
}'

Responses

200

Payment created successfully

{
  "status": "success",
  "data": {
    "id": "595a196b-191c-4767-818e-a7646dd048e8",
    "amount": 20000,
    "uniqueCode": 0,
    "totalAmount": 20000,
    "expiresAt": "2025-12-30T08:27:49.686Z",
    "paymentUrl": "https://mutasiku.co.id/pay/gaWSDgsdftYTc2NDZkZDAas324FSDvE3NjcwODI2NzA2OTg=",
    "type": "QRIS",
    "accountNumber": "081234567890",
    "accountName": "John Doe, Digital & Kreatif",
    "provider": {
      "name": "GOPAY MERCHANT",
      "code": "GOPAY-MERCHANT"
    },
    "qrisImage": "https://mutasiku.co.id/api/qris/gaWSDgsdftYTc2NDZkZDAas324FSDvE3NjcwODI2NzA2OTg="
  }
}

// Note: qrisImage is only included for QRIS and QRIS-DYNAMIC payment types.
// The URL returns a PNG image that can be used directly in <img> tags.

400

Bad Request - Invalid parameters or unsupported payment type for provider

{
  "status": "error",
  "error": "Invalid payment type for this provider"
}

401

Unauthorized - Invalid or missing API key

{
  "status": "error",
  "error": "Missing API key"
}

404

Wallet account not found

{
  "status": "error",
  "error": "Wallet account not found"
}

500

Internal Server Error

{
  "status": "error",
  "error": "Internal server error"
}

Check Payment Status

GET

/api/v1/payments/status/{paymentId}

Check the status of a payment transaction.

Parameters

paymentId

Required

string

UUID of the payment to check

Name	Type	Required	Description
paymentId	`string`	Required	UUID of the payment to check

Example Request

curl -X GET \
  'https://mutasiku.co.id/api/v1/payments/status/{paymentId}' \
  -H 'x-api-key: YOUR_API_KEY'

Usage Examples

Check Payment Status

curl -X GET \
  'https://mutasiku.co.id/api/v1/payments/status/595a196b-191c-4767-818e-a7646dd048e8' \
  -H 'x-api-key: YOUR_API_KEY'

Responses

200

Payment status retrieved successfully

{
  "status": "success",
  "data": {
    "id": "595a196b-191c-4767-818e-a7646dd048e8",
    "amount": 20000,
    "totalAmount": 20000,
    "status": "PAID",
    "type": "QRIS",
    "orderId": "order-123",
    "createdAt": "2025-12-30T07:27:49.686Z",
    "paidAt": "2025-12-30T07:30:15.123Z",
    "expiresAt": "2025-12-30T08:27:49.686Z"
  }
}

401

Unauthorized - Invalid or missing API key

{
  "status": "error",
  "error": "Missing API key"
}

404

Payment not found

{
  "status": "error",
  "error": "Payment not found"
}

500

Internal Server Error

{
  "status": "error",
  "error": "Internal server error"
}

DANA Operations API

Perform QRIS transfers and bank transfers using DANA accounts.

QRIS Transfer

POST

/api/v1/accounts/{id}/transfer

Create QRIS transfer using QR code image

Parameters

id

Required

string

DANA account ID

Name	Type	Required	Description
id	`string`	Required	DANA account ID

Request Body

Required

QRIS transfer data (multipart/form-data)

multipart/form-data

FormData:
- action: "dana-qris-create"
- qrImage: [File] (image file containing QR code)
- amount: "50000" (minimum Rp 1)

Example Request

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts/{id}/transfer' \
  -H 'x-api-key: YOUR_API_KEY' \
  -F 'action=dana-qris-create' \
  -F 'qrImage=@filename.jpg' \
  -F 'amount=50000'

Usage Examples

QRIS Transfer with QR Image

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts/123e4567-e89b-12d3-a456-426614174000' \
  -H 'x-api-key: YOUR_API_KEY' \
  -F 'action=dana-qris-create' \
  -F 'qrImage=@qr_code.jpg' \
  -F 'amount=50000'

Responses

200

QRIS transfer successful

{
  "success": true,
  "message": "QRIS transfer processed successfully"
}

400

Bad Request - Invalid input

{
  "success": false,
  "error": "QR image is required"
}

400

Bad Request - Insufficient balance

{
  "success": false,
  "error": "Insufficient balance",
  "balance": 45000
}

400

Bad Request - QR code decode failed

{
  "success": false,
  "error": "Failed to decode QR code from image"
}

404

Account not found

{
  "status": "error",
  "error": "Account not found"
}

500

Internal Server Error

{
  "success": false,
  "message": "An error occurred processing the request"
}

List Banks

POST

/api/v1/accounts/{id}/transfer

Get list of available banks for transfer

Parameters

id

Required

string

DANA account ID

Name	Type	Required	Description
id	`string`	Required	DANA account ID

Request Body

Required

Bank list request data

application/json

{
  "action": "dana-bank-list"
}

Example Request

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts/{id}/transfer' \
  -H 'x-api-key: YOUR_API_KEY'\
  -H 'Content-Type: application/json' \
  -d '{
    "action": "dana-bank-list"
  }'

Usage Examples

Get Available Banks

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts/123e4567-e89b-12d3-a456-426614174000' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "action": "dana-bank-list"
  }'

Responses

200

Bank list retrieved successfully

{
  "success": true,
  "data": [
    {
    "instId": "014",
    "name": "Bank Central Asia",
    "instLocalName": "Bank Central Asia",
    "payMethod": "WITHDRAW_BANKCARD",
    "payOption": "BANK_TRANSFER"
    },
    {
    "instId": "002",
    "name": "Bank Rakyat Indonesia",
    "instLocalName": "Bank Rakyat Indonesia",
    "payMethod": "WITHDRAW_BANKCARD",
    "payOption": "BANK_TRANSFER"
    }
  ]
}

400

Failed to fetch bank options

{
  "success": false,
  "message": "Failed to fetch bank options"
}

404

Account not found

{
  "status": "error",
  "error": "Account not found"
}

500

Internal Server Error

{
  "success": false,
  "message": "An error occurred processing the request"
}

Validate Bank Account

POST

/api/v1/accounts/{id}/transfer

Validate bank account and get account holder name

Parameters

id

Required

string

DANA account ID

Name	Type	Required	Description
id	`string`	Required	DANA account ID

Request Body

Required

Bank account validation data

application/json

{
  "action": "dana-bank-init",
  "accountNumber": "1234567890",
  "amount": "100000",
  "instId": "014",
  "instLocalName": "Bank Central Asia",
  "payMethod": "WITHDRAW_BANKCARD",
  "payOption": "BANK_TRANSFER"
}

Example Request

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts/{id}/transfer' \
  -H 'x-api-key: YOUR_API_KEY'\
  -H 'Content-Type: application/json' \
  -d '{
    "action": "dana-bank-init",
    "accountNumber": "1234567890",
    "amount": "100000",
    "instId": "014",
    "instLocalName": "Bank Central Asia",
    "payMethod": "WITHDRAW_BANKCARD",
    "payOption": "BANK_TRANSFER"
  }'

Usage Examples

Validate Bank Account

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts/123e4567-e89b-12d3-a456-426614174000' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "action": "dana-bank-init",
    "accountNumber": "1234567890",
    "amount": "100000",
    "instId": "014",
    "instLocalName": "Bank Central Asia",
    "payMethod": "WITHDRAW_BANKCARD",
    "payOption": "BANK_TRANSFER"
  }'

Responses

200

Account validation successful

{
  "success": true,
  "data": {
    "bankAccountIndexNo": "abc123def456",
    "accountName": "JOHN DOE"
  }
}

400

Bad Request - Missing required fields

{
  "success": false,
  "message": "Missing required fields: accountNumber, amount, instId, instLocalName, payMethod, and payOption are required"
}

400

Bad Request - Insufficient balance

{
  "success": false,
  "error": "Insufficient balance",
  "balance": 50000
}

400

Bad Request - Minimum amount

{
  "success": false,
  "error": "Minimum amount is Rp 10,000 for bank transfer",
  "balance": 50000
}

400

Account validation failed

{
  "success": false,
  "message": "Failed to check account name"
}

500

Internal Server Error

{
  "success": false,
  "message": "An error occurred processing the request"
}

Execute Bank Transfer

POST

/api/v1/accounts/{id}/transfer

Execute bank transfer

Parameters

id

Required

string

DANA account ID

Name	Type	Required	Description
id	`string`	Required	DANA account ID

Request Body

Required

Bank transfer execution data

application/json

{
  "action": "dana-bank-create",
  "bankAccountIndexNo": "abc123def456",
  "amount": "100000"
}

Example Request

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts/{id}/transfer' \
  -H 'x-api-key: YOUR_API_KEY'\
  -H 'Content-Type: application/json' \
  -d '{
    "action": "dana-bank-create",
    "bankAccountIndexNo": "abc123def456",
    "amount": "100000"
  }'

Usage Examples

Execute Bank Transfer

curl -X POST \
  'https://mutasiku.co.id/api/v1/accounts/123e4567-e89b-12d3-a456-426614174000' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "action": "dana-bank-create",
    "bankAccountIndexNo": "abc123def456",
    "amount": "100000"
  }'

Responses

200

Transfer executed successfully

{
  "success": true,
  "message": "Transfer successfully"
}

400

Bad Request - Missing required fields

{
  "success": false,
  "message": "Missing required fields: bankAccountIndexNo are required"
}

400

Bad Request - Insufficient balance

{
  "success": false,
  "error": "Insufficient balance",
  "balance": 50000
}

400

Bad Request - Minimum amount

{
  "success": false,
  "error": "Minimum amount is Rp 10,000 for bank transfer",
  "balance": 50000
}

500

Transfer execution failed

{
  "success": false,
  "message": "Failed to execute transfer"
}

Dari API key ke mutasi tersinkron

API Documentation

Getting Started

API Reference

API Documentation

Getting Started

Authentication

API Reference

Provider API

List Providers

Parameters

Example Request

Usage Examples

Get All Providers

Get Only Banks

Get Only Active E-Wallets

Search for Providers

Responses

Accounts API

List Accounts

Parameters

Example Request

Usage Examples

Get All Accounts

Filter by Account Type

Filter Active Accounts with Provider

Search with Pagination

Responses

Create Account

Request Body

Example Request

Usage Examples

Create Bank Account

Create E-Wallet Account

Responses

Get Account Details

Parameters

Example Request

Usage Examples

Get Account Details

Responses

Update Account

Parameters

Request Body

Example Request

Usage Examples

Update Account Name and Interval

Update Login Credentials

Responses

Delete Account

Parameters

Example Request

Usage Examples

Delete Account

Responses

Refresh Account

Parameters

Example Request

Usage Examples

Refresh Account

Responses

DANA Accounts API

Send OTP

Request Body

Example Request

Usage Examples

Send OTP for New DANA Account

Send OTP for DANA Account Relogin or update

Responses

Verify OTP

Request Body

Example Request

Usage Examples

Verify OTP for New DANA Account

Verify OTP for DANA Account Relogin or update

Responses

OVO Accounts API

Send OTP

Request Body

Example Request